Date: Fri, 8 Sep 2000 03:03:15 +0400 From: "Andrey A. Chernov" <ache@nagual.pp.ru> To: Warner Losh <imp@village.org> Cc: Kris Kennaway <kris@FreeBSD.ORG>, "Todd C. Miller" <Todd.Miller@courtesan.com>, "Vladimir Mencl, MK, susSED" <mencl@nenya.ms.mff.cuni.cz>, freebsd-security@FreeBSD.ORG, security-officer@FreeBSD.ORG, millert@openbsd.org Subject: Re: UNIX locale format string vulnerability (fwd) Message-ID: <20000908030313.A20166@nagual.pp.ru> In-Reply-To: <200009072246.QAA07311@harmony.village.org>; from imp@village.org on Thu, Sep 07, 2000 at 04:46:55PM -0600 References: <200009072234.QAA07199@harmony.village.org> <Pine.BSF.4.21.0009071532190.25298-100000@freefall.freebsd.org> <200009072234.QAA07199@harmony.village.org> <200009072246.QAA07311@harmony.village.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Sep 07, 2000 at 04:46:55PM -0600, Warner Losh wrote:
> if (!env || !*env)
> env = getenv("LANG");
>
> - if (!env || !*env)
> + if (!env || !*env || strchr(env, '/'))
> env = "C";
Ok'ed from me.
--
Andrey A. Chernov
<ache@nagual.pp.ru>
http://ache.pp.ru/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000908030313.A20166>